Privacy Policy Contacts and Marketing

Information on the processing of personal data collected from the data subject/user – and Art. 130 – Unsolicited communications Legislative Decree 196/2003 contractor.

In compliance with the General Data Protection Regulation (EU) 2016/679 we are to provide the necessary information regarding the processing of the personal data. This is an information that is made pursuant to art. 13 of EU Reg. 2016/679 (European Regulation for the protection of personal data – GDPR)

For browsing data and cookies, see the privacy policy in the footer of the site.

1. THE DATA CONTROLLER pursuant to art. 4 and 24 of the GDPR, is Boffi spa Via Oberdan, 70 – 20823 Lentate sul Seveso (MB), in the person of its pro tempore legal representative. The contact email of the owner is privacy@boffi.com

2. DATA PROTECTION OFFICER (DPO / RPD-Responsabile della protezione) is identified pursuant to art. 37 – 39 of EU Reg. 2016/679. The contact email of the DPO is dpo.boffi@dpoprofessionalservice.it

3. PURPOSE AND LEGAL BASIS OF PROCESSING, DATA RETENTION

4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA

The personal data provided will be communicated to recipients, who will process the data as Data Processor (art.28 of the EU Reg. 2016/679) or as natural persons acting under the authority of the Data Controller or Data Processor (art.29 of EU Reg. 2016/679), or to recipients who hold the role of independent Data Controllers, for the purposes listed above in point 3. Specifically, the data will be communicated to: recipient that provide services for the management of the information system used by Boffi spa and telecommunications networks (including e-mail and platforms); – studies or companies in the context of assistance and consultancy relationships; – social networks platforms; – Boffi group companies, associated, controlled or contractually linked by Boffi spa and / or part of its distribution and sales network (such as branches, importers, distributors, resellers, shippers, etc …), possibly also based in countries not belonging to the European Union; – competent authorities for the fulfillment of legal obligations and / or provisions of public bodies, on request. The list of Data Processor is constantly updated and available on request to privacy@boffi.com or at the Headquarters of Boffi spa Via Oberdan, 70, 20823 Lentate sul Seveso.

5. TRANSFER OF DATA TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION AND SAFEGUARDS

The site is hosted in EU countries. The personal data provided can be transferred to non-EU countries, in order to fulfill related purposes based on the data processing purposes. The data will be transferred according to Article 44 – General principle for the transfer; Article 45 – Transfer based on an adequacy decision; Article 46 – Transfers subject to appropriate safeguards, specifically the data will be transferred. For information about the safeguards regarding the transfer of data outside the EU, write to privacy@boffi.com

6. NATURE OF DATA PROVISION AND REFUSAL

Users / contractors are free to provide their personal data and their failure to provide it will only make it impossible to obtain the information or services requested and provided through this website. The provision of personal data for purposes B) and / or C) is optional and will not affect the purposes referred to in point A). The marketing activity will be carried out only with the specific consent of the data subject. The insertion of the data in the CRM is optional and will automatically entail the visibility of the same by those who have access to it, i.e. those responsible and authorized to the treatment, present at the points of sale in the world.

7. DATA SUBJECTS’ RIGHTS (natural persons)

You can exercise your rights as expressed in the GDPR by sending an e-mail to Data Controller at privacy@boffi.com or writing or contacting the Data Protection Officer at dpo.boffi@dpoprofessionalservice.it. In particular you can, at any time, ask the Data Controller to access your personal data (art.15), to rectify it (art.16), to erase it (art.17), to restrict the processing (art.18) or to object to processing of your personal data (art.21). You can ask for data portability (art.20). For the processing based on consent, you can withdraw the consent at any time without prejudice to the lawfulness of the processing based on consent before withdrawal. To withdraw consent to non-automated profiling, simply write an e-mail to dpo.boffi@dpoprofessionalservice.it with the subject “no profiling” at any time

The data subject has the right to lodge a complaint with the Autorità Garante Privacy (https://www.garanteprivacy.it), or to appeal to the appropriate judicial offices

Even for legal persons / contractor, to no longer receive automated direct marketing communications (eg E-mail, sms, social) it will be sufficient to write an e-mail at any time to the address dpo.boffi@dpoprofessionalservice.it with the subject “Delete by automated” or use our automatic cancellation systems intended for e-mail only. To no longer receive traditional direct marketing communications (telephone calls with operator and paper mail), simply write an e-mail to dpo.boffi@dpoprofessionalservice.it at any time with the subject “cancellation from traditional”.

8. CHANGES TO THE PRIVACY POLICY

The Data Controller reserves the right to modify, update, add or remove parts of this privacy statement. The Data subject is required to periodically check for any changes. In order to facilitate this check, the information notice will contain the date to update the information. The use of the site, after the publication of the changes, will constitute the acceptance of the same.

Update date: June 30, 2020